InfluxDB NoSQL Injection
Target Program: InfluxData (InfluxDB)
🎯 Vulnerability: SQL Injection (SQLi)
💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.
More Writeups Like This
pentester.land
by Alain Mowat (@plopz0r)Getting code execution on Veeam through CVE-2023-27532
pentester.land
by Laluka (@TheLaluka)Spip Preauth RCE 2024: Part 2, A Big Upload
pentester.land
by Yaniv Nizry (@YNizry)Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities
pentester.land
by Omar Ahmed (@spaceboy2O)